Securing HPE NonStop Servers using Safeguard Training Course and Workshop in Bangalore, Mysore, Chennai, Hyderabad, Pune, Mumbai, Delhi, Noida, Gurgaon, Kolkata

This Securing HPE NonStop Servers using Safeguard training course provides information and knowledge needed to secure HPE NonStop systems using NonStop operating system utilities and Safeguard. Topics covered include kernel security architecture, Safeguard administration and installation, user authentication and management, Guardian security, and securing OSS files. Hands-on labs reinforce concepts discussed and provide the opportunity to use the utilities and Safeguard.

By attending Securing HPE NonStop Servers using Safeguard workshop, delegates will learn to:

Be familiar with the $CMON interface and TACL considerations
Install and configure Safeguard software
Create and manage user IDs
Apply Access Control Lists (ACLs) on system objects
Describe sources of audit events
Use the Safecom command utility
Use the SAFEART utility to generate audit reports
Apply OSS standard security and OSS ACLs on OSS objects

Attend a training on Concepts and Facilities for HPE NonStop Systems or equivalent practical experience
Knowledge of TACL commands (such as STATUS, FILEINFO, and WHO) for information gathering
Knowledge of Guardian utilities (such as FUP, SCF, and DSAP)
Knowledge of basic OSS commands and utilities
Ability to manage user profiles using the PASSWORD and DEFAULT programs

The Securing HPE NonStop Servers using Safeguard class is ideal for:

Information security administrators
Electronic Data Processing (EDP) auditors
System operations management personnel in security operations

NonStop Kernel Security Architecture

Guardian and OSS application environments
Authentication, authorization, and audit
Goals of NonStop kernel standard security
Components of NonStop kernel security architecture
Memory address isolation and disk file protection
$CMON process
Licensed program files
Setuid setting for OSS programs

Safeguard Features

Relation of Safeguard to the NonStop kernel
Safeguard extensions to NonStop kernel security system
Safeguard process components and their functions
Safeguard disk file components and global configuration options
Safeguard warning mode and OSS audit options

User Authentication

Authentication defined
User profile management considerations
Safeguard configuration options for password management and system access control
Guardian user IDs and OSS UID
Administrative and file sharing groups
User profile options for Guardian and OSS
Network users and remote passwords
Create a user ID using Safecom

User Management with Safecom

Safecom session commands and displays
User IDs and aliases management
File sharing group(s) for OSS usage
User audit attributes
Default protection for users
Safeguard authentication service

Guardian Security

System product files and sensitive utilities
TACL specific considerations
Guardian disk file access and ownership control
Process and ownership control
Guardian disk file security
OSS UGO bits, umask, and profile file
OSS sticky bit, SETUID, SETGID
OSS file ownership access and control

Securing OSS Files

OSS file system layout
File security
Permission modes
File and directory permissions
User and group IDs
Setting the sticky bit
OSS file change ownership and group association
OSS Access Control Lists (ACLs)
File and directory ACLs

Authorization and Object Access Control

Object types and their management
Safecom to create and manage protection records on objects
Apply ACLs on objects
Object warning mode
ACL persistence
Node names on ACLs
DISKFILE-PATTERN

Safeguard Audit Configuration

Sources of security event audit information
Create, manage, and activate audit pools
Audit pool recovery modes
OSS API and process audit
Safeguard configuration for OSS audit
AUDITENABLED option for OSS filesets
SAFEART utility

Safeguard Administration and Installation

Safeguard security administration features
Assign control of Safeguard
Safeguard security groups
Safeguard installation options
Undeniable super ID
Security Event Exit Process (SEEP)

Encarta Labs Advantage

One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
All courses are delivered by Industry Veterans
Get jumpstarted from newbie to production ready in a matter of few days

Trained more than 50,000 Corporate executives across the Globe
All our trainings are conducted in workshop mode with more focus on hands-on sessions

Securing HPE NonStop Servers using Safeguard

COURSE AGENDA